Using your digital signature in Mozilla Thunderbird for Windows

От Infonotary
Направо към: навигация, търсене

Before you proceed you must do

  • IMPORTANT WHEN USING THE PRODICTS OF MOZILLA!!!: When you use Mozilla prodsucts you must know, that it uses direct access to smart cards. When we install succesfully certificates in Mozilla Firefox or Thunderbird , WE MUST NOT delete them from there, because that way we will delete them from the smart card along the public and private keys!

The prefered way Firefox and Thunderbird is through InfoNotary Configurator for Mozilla. After the extension is installed everything will be configured If you prefer to do it manually follow the steps:

Install Infonotary certificate chain

Before you can start using the certificate, you must install the Infonotary certificate chain.

Certificate chain for certificates, issued before 08.01.2018 - INotaryCertChain.p12.

Certificate chain for certificates, issued after 08.01.2018 - InfoNotary_Qualified_eIDAS.p12


Start Mozilla Thunderbird. From the menu, select Options.

Thunderbird1.png

From Privacy & Security select Manage Certificates.

Thunderbird2.png

Choose the tab Your certificates and click on Import.

Thunderbird3.png

From the window that appears, select the pre-downloaded certification chain.

Thunderbird4.png

Leave the field blank and click OK.

Thunderbird5.png

Newly installed certificates can be found in section Authorities.

Thunderbird6.png

In Mozilla for every certificate of a Certification Authority (CA) the user must choose a level of trust. This is done by selecting the certificate and clicking on Edit Trust. The easiest way to do this setting for the certificate "InfoNotary CSP Root" and/or "InfoNotary TSP Root" select two possible options. This will make all the InfoNotary trusted certificates for all operations.

Thunderbird7.png


Install software security module

Start Mozilla Thunderbird. From the menu, select Options.

Thunderbird1.png

From Privacy & Security, choose Security Devices.

Thunderbird8.png

To add a new device, choose Load.

Thunderbird9.png

Change the name of the module (Module Name), as desired.

Thunderbird10.png

Select PKCS # 11 library corresponding to your smart card.

  • Siemens - C:\WINDOWS\system32\siecap11.dll
  • Charismathics - C:\WINDOWS\system32\cmP11.dll
  • Bit4id - C:\WINDOWS\system32\bit4ipki.dll

In case you use 64 bits version of Firefox or Thunderbird and Charismathics smart card, path to library is C:\WINDOWS\system32\cmP1164.dll.

After you click OK, your smart card will appear in the list of available devices.

Thunderbird11.png


Configuring use profile in Thunderbird

In order for you to sign your outgoing mails, you have to associate your account with your digital signature on your smart card. To do this follow the steps below:

From the menu, select Account Settings.

Thunderbird12.png

Press the Select button on "Personal certificate for digital signing" and "Personal certificate for encryption"

Thunderbird13.png

A window will appear where you can specify your certificate.

Thunderbird14.png

Choose the appropriate certificate from the smart card and confirm by clicking OK.


Thunderbird will offer you to choose the same certificate for decrypting messages send to you.